Re: [FW1] Unknown established TCP packets

["firewall_mailinglist " <firewall_mailinglist@FW1-NOSPAMmy-deja.com>]

Rodney,
Two questions:
1) Do you have a seperate Management Server machine? If so, this needs upgraded to SP-2 before you will see the appropriate lines in the fwui_head.def file.
2) I have only seen the Unknown established... message in cases where a socket is established before the firewall module starts. Is this the case with your attempting to access your pop server? If so, wait to open the socket until the firewall module is running with a policy.

David
--

On Mon, 11 Sep 2000 09:07:19   Rodney Lacroix
wrote:
>
>I've seen this listed here quite a bit, but I'm fairly confused at this point.  I've upgraded my firewall to 4.1 with SP2 (NT operating system).  Since doing so, I have been unsuccessful at receiving email from my Internet POP account.
>
>I do see the "unknown established TCP packets" in my log file.  However, the solutions on how to fix it and stop the logging do not seem to apply to me.  I cannot find the text strings that I need to comment or uncomment.  Specifically, the lines:
>
>#define NON_SYN_RULEBASE_MATCH_LOG - to disable logging of the packets
>
>and
>
>#define ALLOW_NON_SYN_RULEBASE_MATCH - to change the TCP checking to pre-SP2
>
>do NOT appear in my fwui_head.def file.
>
>What's going on?
>
>
>
>================================================================================
>     To unsubscribe from this mailing list, please see the instructions at
>               http://www.checkpoint.com/services/mailing.html
>================================================================================
>


--== Sent via Deja.com http://www.deja.com/ ==--
Before you buy.


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================